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Network Anomaly Detection 



Finds infections hijacking data 100X faster 

The iboss Secure Web Gateway Platform's exclusive network anomaly detection exposes the most evasive 
signatureless malware, even after it's made it past your sandbox. Once a problem is pinpointed, you 
immediately receive real-time email alerts and your data is contained, before it is hijacked. Our technology 
takes only minutes to deploy and provides 24/7 peace of mind, without requiring you to reconfigure the 
entire network. 
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Detect command and control 
callbacks 

Scans across DNS, IP other protocols 

The iboss Secure Web Gateway Platform leverages visibility across all TCP and UDP ports to scan for 
evasive threats on hidden ports and protocols include those using DNS, IP, SSH, IMAP, POP and many 
others. It also scans for command and control callbacks and thwarts attacks such as network probes and 
port scans. 
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& General Info for KJOHNSON_COMP (1 0.1 28.1 6.97): This Machine is infected and exhibits High Risk Behavior (Malware Access) 

Security Group: 



Current Infection Status: 


INFECTED # 


Risk Status: high A 




User at Infection Time: 


kjohnson 


Risky Behaviors: 


Malware Access 


Infection Incidents: 


7 


Malware Access Count: 


4256 


Dwell Time: 


Avg: 596.5 hrs / Total: 5,563.9 hrs 


User at Malware Risk Event: 


kjohnson 


First Callback Detection: 


06/10/2015 12:08 PM 


First Malware Detection: 


02/03/2015 8:39 AM 


First Callback Dest: 


56.18.19.150 


Last Malware Detection: 


07/02/2015 5:34 PM 


First Callback Signature: 


bronetbro.com 


Last Malware Dest. IP: 


156.153.226.92 


Last Callback Detection: 


07/02/2015 5:34 PM 
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Last Callback Dest: 
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Behavioral Sandboxing 

Defends against polymorphic malware 

Solely relying on AV scanners or signature-based monitoring to prevent malware is no longer effective. 
Today's threats are polymorphic and capable of continually morphing to evade signature-based detection. 
The iboss Secure Web GatewayPlatform includes a behavior-based approach to malware detection, which 
doesn't rely on signatures to stop advanced threats. 
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Detect and contain protocol-evasive 
threats 





Stops advanced malware using hidden protocols 
like TOR 

Advanced malware integrating with the TOR network to circumvent your security represents a pervasive, 
new class of threat that standard solutions can't see. The method of monitoring good-behaving protocols is 
not enough and can lead to infections entering the network faster and staying undetected longer. Only 
iboss monitors the bad-behaving protocols to pinpoint the infection quickly, issue alerts and auto-contain 
your data to stop loss. 
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CISO Command Center 

Identify data breaches faster 

Deal with incidents not noisy event logs. The iboss Secure Web Gateway Platform automatically 
consolidates and prioritizes events, translating them into actionable incidents. This not only shortens 
investigative response time, it reduces data loss when breaches occur. C&C callback monitoring, 
continuous network anomaly monitoring and behavioral analysis provide an unmatched approach that 
exposes malware in real-time. 
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Number of Callbacks: 0 
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Unified Cloud Platform 

Delivers anytime, anywhere security 

Flexible security across any device, anywhere, and at any time is delivered via iboss Unified Cloud Platform, 
iboss intelligent cloud architecture ensures you'll never have to backhaul data from remote locations or 
mobile devices to corporate HQ. Instead, get instant access to the data you need, while maintaining wire- 
speed performance at your core sites. 




Unified Administration & Single Pane of Glass Threat and Event Reporting 
CISO Command Center 



Evasive Protocol Defense 


Traffic Anomaly Monitoring 


Detect Data Exfiltration 


Intrusion Prevention 


SSL Inspection 


Full Port 6c Protocol 
Monitoring 


Bandwidth Management 


Cloud Application 
Visibility & Control 



Global SaaS or Hybrid Platform 



la 


IpfT 


\ 7 


“A 


* 


□ 


-ft 


HQ 


Branches/ 

Stores 


Remote 

Offices 


Home Office 


Travel 


Mobile 

Devices 


Internet 
of Things 



A Platform for Cybersecurity. Every Device. Anywhere. 





Manage Cloud Apps and Social 
Media 

Granular control that stops advanced threats 

Many of the applications we rely on to conduct business, such as Skype, WebEx and others, use proprietary 
signatures and non-standard ports to communicate, but this can introduce threats that result in data loss. 
In addition, social media apps such as Facebook can be a boon to businesses but unmanaged access 
introduces risk. The iboss Secure Web Gateway Platform protects you with granular application visibility 
and control across all 1 31 K ports on your network to defend against advanced threats and misuse, without 
affecting user experience. 
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Auto-quarantine high-risk users 

Stop the spread of infections 

The number of mobile devices, remote locations and roaming users accessing your network has created 
new sources of advanced threats for which you must be prepared. The iboss Secure Web Gateway 
Platform employs network-wide scanning to pinpoint high-risk machines and users and quarantine them 



to stop the spread of infection, alert you and enable remediation. 
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Quarantine internal outbreaks 

With iboss Threat Isolator 





iboss Threat Isolator puts data protection tools inside the network perimeter for comprehensive protection 
against exploits such as CryptoLocker or C&C callbacks. It dynamically isolates and contains infections by 
blocking internal communications between computers on your network. You receive alerts, when a 
problem is identified, giving you time to remediate and avoid further infection. 
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Manage SSL and Encrypted 
Communications 

Granular policy enforcement and malware defense 

Analysts predict that SSL will comprise 70% of all Internet traffic by 2017. Enforcing encryption policies 
while trying to detect malware hidden inside SSL traffic can create a conundrum that risks your 
organization's security. The iboss Secure Web Gateway Platform ensures compliance and protection across 
all HTTP and HTTPS traffic, with flexible tools in a highly scalable solution. 
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Intelligent Bandwidth Management 

Maintain network health and performance 

Unlike stateful shaping that continuously applies policy, used by most standard security solutions, iboss 
smart, stream-based approach allows you to provide uninterrupted bandwidth availability during 
saturation periods, giving your users more access to technology without compromising performance. 
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Visual IPS Tool 

Prevent intrusions with visual IPS tools that simplify 
rules 



Legacy IPS tools rely heavily on manual rule editing which is not only complex, but also time-consuming. 
With the iboss Secure Web Gateway Platform, creating, managing and editing rules is fast, easy-to- 
understand and free from errors. The results are more efficiency, less strain on IT resources and lower 
TCO. 
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Rules are constructed using the Snort rule format, he rule builder below helps you visually build your rules, or you can use the rule 
editor to see / edit the raw rule text. Note; Not off rules are supported. m the rate builder. 



A ATCP/UDP rule with no deep packet checks. (One of the following options: content match, dsiie, pcre, byte_test, or flags) is more 
suited to a firewall or blacklist. 
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Fast Google-like Log Searches 

Search logs faster 

Whether you're searching through logs spanning one day or five years, across one gigabyte or multiple 
petabytes, the iboss Secure Web Gateway Platform delivers your results immediately, without the 
protracted wait times of competitive solutions. This Google-like capability is enabled by iboss' exclusive 
dynamic indexing, which ensures the data you need is delivered instantly. 
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Extend security to WiFi and BYOD 

Extend compliance and threat protection 

Automatically secure WIFI networks to extend compliance while protecting against advanced threats. Easily 
integrate guest users via their own Google account, using OAuth or seamlessly integrate with your existing 
Network Access Controller (NAC). 
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MobileEther MDM 

Manage device-level policies 

Protect mobile devices and enforce policies with full capabilities from iboss award-winning MDM. Push 
apps, wipe devices if lost or stolen, and enforce device-level restrictions Alliances with technology partners 
such as Apple and Samsung make managing devices a snap. 
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Threat and Event Console Reporting 

Respond and document incidents via responsive 
interface 

The iboss Secure Web Gateway Platform includes a Threat and Event Console reporting that is integrated 
across all features and is easy to use, with a highly-responsive, intuitive interface, guided interactive 
wizards, and customizable reporting templates. Within seconds, go from organization-wide visibility, to a 
360-degree view of each network user, including Web activity, application use, bandwidth consumption, 
data loss risks and more. 
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Blended AV Scanning 

Prevents malicious files with info from multiple 
feeds 

iboss AV scanning gets malware feeds from a variety of proprietary and best-of-breed sources including 
Kaspersky AV, blended C&C feeds, iboss Secure Web Gateway Platform Sandboxing and Baselining, and 
more. Within minutes these malware feeds are synchronized in the cloud and delivered to the 
iboss Secure Web Gateway Platform database, whether on-premises or in the cloud. 
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Enforce regulatory compliance 

With Next-Gen Web security 

Web security has evolved beyond traditional URL filtering. The iboss Secure Web Gateway Platform 
provides next-gen features that include granular management of social media, Google services, and 
applications, SSL traffic inspection, and comprehensive user-based reporting, centrally managed from a 







responsive interface, iboss innovative, advanced malware and APT defense ensure unrivaled protection 
from today's most sophisticated attacks. 
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Integration via Restful API 

Easy integration with partner ecosystems 










The convergence of mobile, applications and cloud technologies has made the easy integration of security 
tools an imperative. The iboss Secure Web Gateway Platform includes an open partner ecosystem via 
RESTFUL API for streamlined integration that enables optimum performance. 




Ready to see the iboss Secure Web 
Gateway Platform in Action? 

Request Demo(/demo-request) 
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v* Contact Support 

Support Overview(/support) 

Open a Ticket(http://support.iboss.com) 
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Cloud Management(//www. iboss.com/phantomweb/action/enterprisemanagement/login) 

North America: 
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International: 

858-568-7051 X3 

v* Contact Sales 

Request Demo(//www. iboss. com/demo-request) 
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North America: 
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International: 
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EMEIA: 
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